application=tornado.web.Application([
    (r'/',MainHandler),
],
cookie_secret='DONT_LEAK_SECRET',
xsrf_cookies=True,
)

settings={
    "cookie_secret":"DONT_LEAK_SECRET",
    "xsrf_cookies":True
}

application=tornado.web.Application([
    (r'/',MainHandler),
],**settings)